Privacy Policy

1) Information on the Collection of Personal Data and Contact Details of the Data Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the handling of your personal data when using our website. Personal data is any data with which you can be personally identified.

1.2 The data controller responsible for data processing on this website in accordance with the General Data Protection Regulation (GDPR) is Stephan Bauer, Seebrucker Str. 27, 83370 Seeon, Germany, Tel.: 08667/879733, E-Mail: kontakt@shoji-bau.de. The person responsible for processing personal data is the natural or legal person who, alone or together with others, determines the purposes and means of processing personal data.

1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the data controller). You can recognize an encrypted connection by the “https://” prefix and the padlock symbol in your browser’s address bar.

2) Data Collection When Visiting Our Website

For purely informational use of our website—meaning if you do not register or otherwise provide us with information—we only collect the data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data, which is technically required to display the website to you:

The website you visited
Date and time of access
Amount of data sent in bytes
Source/referrer from which you arrived at the page
Browser used
Operating system used
IP address used (if applicable: in anonymized form)

The processing is carried out in accordance with Article 6(1)(a) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not disclosed or used for any other purpose. However, we reserve the right to review the server log files retrospectively if there are concrete indications of unlawful use.

3) Cookies

To make your visit to our website attractive and to enable the use of certain functions, we use cookies—small text files that are stored on your device. Some of these cookies are automatically deleted when you close your browser (so-called "session cookies"), while others remain on your device for a longer period and allow you to save site settings (so-called "persistent cookies"). In the latter case, you can check the storage duration in the cookie settings overview of your web browser.

If any of the cookies we use also process personal data, the processing is carried out in accordance with Article 6(1)(b) GDPR either for the performance of the contract, in accordance with Article 6(1)(a) GDPR in the event of consent, or in accordance with Article 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of your visit.
You can configure your browser so that you are informed about the setting of cookies and can decide individually whether to accept them, or you can exclude the acceptance of cookies for certain cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be limited.

4) Contact

When contacting us (e.g. via a contact form or email), personal data is processed solely for the purpose of handling and responding to your inquiry and only to the extent necessary. The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Article 6(1)(f) GDPR. If your contact is aimed at entering into a contract, the additional legal basis for processing is Article 6(1)(b) GDPR. Your data will be deleted when it is evident from the circumstances that the matter in question has been conclusively resolved, provided that no legal retention obligations apply.

5) Data Processing for Order Fulfillment

5.1 As far as necessary for the processing of contracts for delivery and payment purposes, the personal data we collect is transmitted in accordance with Article 6(1)(b) GDPR to the contracted transport company and the contracted financial institution.

If, based on a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact details you provided during the order (name, address, email address) to personally inform you—via an appropriate communication channel (e.g., by post or email)—about upcoming updates within the legally prescribed period, in accordance with our statutory duty to provide information pursuant to Article 6(1)(c) GDPR. Your contact details are used strictly for notifications regarding the updates we owe you and are processed only to the extent necessary for that specific information.

For the processing of your order, we further cooperate with the following service provider(s), who support us wholly or partially in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

5.2 Disclosure of Personal Data to Shipping Service Providers

- Deutsche Post
If the delivery of the goods is carried out by Deutsche Post (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn), we will forward your email address in accordance with Article 6(1)(a) GDPR before the delivery of the goods for the purpose of coordinating a delivery appointment or providing a delivery notification to Deutsche Post, provided that you have given your explicit consent for this during the ordering process. Otherwise, for the purpose of delivery and in accordance with Article 6(1)(b) GDPR, we will only provide the recipient's name and the delivery address to Deutsche Post. The disclosure takes place only to the extent necessary for the delivery of the goods. In this case, prior coordination of a delivery appointment with Deutsche Post or a delivery notification is not possible.
Consent may be revoked at any time with effect for the future, either with the above-mentioned data controller or directly with Deutsche Post.
- DPD
If the delivery of the goods is carried out by the transport service provider DPD (DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg), we will forward your email address and telephone number in accordance with Article 6(1)(a) GDPR before the delivery of the goods for the purpose of coordinating a delivery appointment or providing a delivery notification to DPD, provided that you have given your explicit consent for this during the ordering process. Otherwise, for the purpose of delivery and in accordance with Article 6(1)(b) GDPR, we will only provide the recipient's name and the delivery address to DPD. The disclosure takes place only to the extent necessary for the delivery of the goods. In this case, prior coordination of a delivery appointment with DPD or a delivery notification is not possible.
Consent may be revoked at any time with effect for the future, either with the above-mentioned data controller or directly with the transport service provider DPD.

6) Web Analytics Services

Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google (Universal) Analytics uses so-called "cookies", which are text files stored on your device that enable an analysis of your usage of the website. The information generated by the cookie about your use of this website (including the shortened IP address) is usually transmitted to a Google server and stored there; in some cases, it may also be transmitted to the servers of Google LLC in the USA.
This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which ensures the anonymization of the IP address by shortening it and excludes direct personal identification. With this extension, your IP address is shortened by Google within EU member states or other contracting states of the European Economic Area beforehand. Only in exceptional cases is the full IP address transmitted to a server of Google LLC in the USA and shortened there. On our behalf, Google uses this information to evaluate your usage of the website, to compile reports on website activities, and to provide us with further services related to website and internet usage. In doing so, the IP address transmitted by your browser as part of Google (Universal) Analytics is not merged with other data from Google.
Google Analytics also enables, through a special function called "demographic characteristics", the creation of statistics that provide information about the age, gender, and interests of website visitors based on an evaluation of interest-based advertising and with the inclusion of third-party information. This allows the definition and differentiation of user groups of the website for the purpose of targeted marketing measures. However, the datasets recorded via "demographic characteristics" cannot be assigned to any specific individual.
Details regarding the processing initiated by Google Analytics and how Google handles website data can be found here: https://policies.google.com/technologies/partner-sites
All the processing described above, particularly the setting of Google Analytics cookies to read information on the device used, is carried out only if you have given us your explicit consent in accordance with Article 6(1)(a) GDPR. Without this consent, the use of Google Analytics will not take place during your visit to the website.
You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please disable this service using the "Cookie-Consent-Tool" provided on the website. We have concluded a data processing agreement with Google for the use of Google Analytics, which obliges Google to protect the data of our website visitors and not to disclose it to third parties.
For the transmission of data from the EU to the USA, Google relies on the so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.
Further information on Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=de&gl=de

7) Website Functionalities

7.1 Pinterest Plugin as a Shariff Solution
On the seller's pages, so-called social plugins (“plugins”) of the social network Pinterest are used, which is operated by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (“Pinterest”).
To enhance the protection of your data when visiting our website, these buttons are not fully integrated as plugins but are embedded in the page using an HTML link only. This method of integration ensures that when you access a page of our website containing such buttons, no connection is established with Pinterest’s servers. When you click the button, a new browser window opens and loads the Pinterest page, on which you (if applicable, after entering your login details) can interact with the plugins.
Please refer to Pinterest’s privacy policy (https://about.pinterest.com/de/privacy-policy) for details on the purpose and scope of data collection, further processing and use of data by Pinterest, as well as your rights and options for protecting your privacy.

7.2 Use of YouTube Videos
This website uses the YouTube embedding function to display and play videos provided by the service “YouTube”, which is part of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
In doing so, the enhanced privacy mode is used, which according to the provider only initiates the storage of user information once the video is played. If the playback of embedded YouTube videos is started, the provider “YouTube” uses cookies to collect information about user behavior. According to YouTube, these cookies are used, among other things, to collect video statistics, improve user-friendliness, and prevent abusive practices. If you are logged into Google, your data will be directly associated with your account when you click on a video. If you do not wish for your data to be linked to your YouTube profile, you must log out before activating the button. You have the right to object to the creation of these user profiles, and to exercise this right you must contact YouTube. As part of the use of YouTube, personal data may also be transmitted to the servers of Google LLC in the USA.
Regardless of whether the embedded videos are played, a connection to the Google network is established every time this website is accessed, which—beyond our control—may trigger further data processing operations.
All the processing described above, particularly the reading of information on the device used via the tracking pixel, is carried out only if you have given us your explicit consent in accordance with Article 6(1)(a) GDPR. Without this consent, the use of YouTube videos will not take place during your visit to the website.
You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please disable this service using the “Cookie-Consent-Tool” provided on the website or via alternative options communicated to you on the website.
Further information on data protection regarding “YouTube” can be found in the YouTube Terms of Use at https://www.youtube.com/static?template=terms and in Google’s privacy policy at https://www.google.de/intl/de/policies/privacy

8) Rights of the Data Subject

8.1 The applicable data protection law grants you the following rights regarding the processing of your personal data by the data controller (rights of access and intervention), with reference to the respective legal basis for the prerequisites for exercise:

Right of access pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to notification pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to revoke consent granted pursuant to Art. 7(3) GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

8.2 RIGHT OF OBJECTION

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERWHELMING LEGITIMATE INTEREST WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT OF OBJECTION, WE WILL CEASE THE PROCESSING OF THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING IS RESERVED IF WE CAN DEMONSTRATE COMPELLING PROTECTIVE REASONS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING IS NECESSARY FOR THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US IN ORDER TO CONDUCT DIRECT MARKETING, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT OF OBJECTION, WE WILL CEASE THE PROCESSING OF THE AFFECTED DATA FOR DIRECT MARKETING PURPOSES.

9) Duration of Storage of Personal Data

The duration of the storage of personal data is determined based on the respective legal basis, the processing purpose, and – where applicable – additionally based on the respective statutory retention period (e.g., commercial and tax-related retention periods).

In the processing of personal data on the basis of explicit consent pursuant to Art. 6(1)(a) GDPR, such data will be stored as long as the data subject does not withdraw their consent.

If there are statutory retention periods for data that is processed within the context of contractual or quasi-contractual obligations on the basis of Art. 6(1)(b) GDPR, such data will be routinely deleted after the expiration of the retention periods, provided that they are no longer necessary for contract fulfillment or the initiation of a contract and/or we no longer have a legitimate interest in further storage.

In the processing of personal data on the basis of Art. 6(1)(f) GDPR, such data will be stored as long as the data subject does not exercise their right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that outweigh the interests, rights, and freedoms of the data subject, or if the processing is necessary for the assertion, exercise, or defense of legal claims.

In the processing of personal data for the purpose of direct marketing on the basis of Art. 6(1)(f) GDPR, such data will be stored as long as the data subject does not exercise their right to object pursuant to Art. 21(2) GDPR.

Unless otherwise specified in the other information in this statement regarding specific processing situations, stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.